Selangkah today has issued a statement to address recent allegations regarding a data breach on its databases. The company is assuring that its systems have not been compromised and no personal data belonging to its users have been stolen.
This came as a response to a report that was published by The Star yesterday regarding the purported sale of data belonging to over five million Selangkah users by a hacker via a data leak forum. The seller claims the stolen data is “related to COVID-19 vaccination” and consists of 10,027 files that’s been sourced from “Selangkah.my.”
According to the publication, a sample provided in the forum post allegedly contained sensitive information such as full names, MyKad numbers, MySejahtera user IDs, email addresses, contact numbers, medical information, and many more. The stolen data is reportedly offered for sale at US$1,000 (~RM4,761).
Prior to this, Selangkah told The Star that it was aware of the allegations and conducted an internal probe on the matter. The publication noted that the National Cyber Security Agency (Nacsa) is also investigating the claim.
In today’s statement, the company clarified that the data in question was not obtained from its databases and insisted that its systems remain secure. It is also encouraging users to contact its Customer Service team via its mobile app for further inquiries or concerns.
“The security and privacy of our users’ data remain our utmost priority,” it wrote. “We want to reassure our users that we will continue to implement and maintain best practice measures to ensure the safety and security of our users’ data.”
(Source: Selangkah press release / The Star)
